Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_COwDv5XkoYYyhJgP_qwBSHFm50.roa
File: _COwDv5XkoYYyhJgP_qwBSHFm50.roa (raw, json)
Hash identifier: b7Iyv+8YJpp6HOm25cqap6uTGeszF/qdRTBIxvC6pFU=
Subject key identifier: FC:23:B0:0E:FE:57:92:86:18:CA:12:60:3F:FA:B0:05:21:C5:9B:9D
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747BCE49B0819C2DAA0FF0D40F158B6
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_COwDv5XkoYYyhJgP_qwBSHFm50.roa
Signing time: Thu 02 Jan 2025 13:50:00 +0000
ROA not before: Thu 02 Jan 2025 13:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48014
IP address blocks: 185.187.154.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bc:e4:9b:08:19:c2:da:a0:ff:0d:40:f1:58:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc23b00efe57928618ca12603ffab00521c59b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f8:b5:5d:a3:5d:72:8e:43:d4:e0:f2:91:1e:
49:c6:83:f8:c6:b5:57:04:a1:57:ce:9b:73:f4:95:
bf:57:0f:91:23:d2:21:61:00:75:af:b7:3a:d5:96:
99:5a:c8:9a:c4:46:8e:ea:58:45:48:41:0f:d0:23:
41:c0:97:d7:5e:4b:69:43:d9:24:25:88:5c:35:88:
74:5f:c5:20:f2:d7:52:cc:81:46:b9:93:a8:b2:4a:
8f:a9:03:e6:c8:ca:5a:06:48:42:cb:96:c2:27:28:
b7:19:b5:be:5a:49:aa:51:1d:56:b1:95:ae:86:ad:
b3:16:6d:79:8d:77:b2:24:89:76:ae:10:bb:a4:45:
41:48:e8:5d:55:77:0c:5f:0b:c2:ee:fa:7b:9a:83:
d8:a0:02:4d:89:b1:1b:3f:67:72:88:af:b8:97:9c:
a1:94:a0:51:5d:1d:fd:5b:0b:a3:51:46:bb:8a:0a:
bd:cf:dd:7f:c1:73:ad:fb:0b:f4:b6:f0:11:03:f2:
44:ec:e2:c7:46:88:9e:16:85:d9:46:3a:5c:a2:9d:
49:a4:58:37:dc:5b:2c:c5:6a:a2:dd:61:ba:31:1b:
7c:dc:b2:ca:1d:b3:70:e7:55:1e:c2:d4:5c:96:d5:
27:4d:be:1c:f7:c1:44:be:e7:a8:36:31:6e:e6:43:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:B0:0E:FE:57:92:86:18:CA:12:60:3F:FA:B0:05:21:C5:9B:9D
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_COwDv5XkoYYyhJgP_qwBSHFm50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.154.0/24
Signature Algorithm: sha256WithRSAEncryption
86:cb:4d:12:d5:c7:99:03:b4:22:2b:7f:84:a8:9e:92:38:c2:
96:bd:23:41:d4:78:03:03:6c:4d:f3:64:77:66:5a:0b:79:b9:
18:cf:14:24:fa:94:0b:20:b3:09:53:6f:d9:c4:b1:49:73:06:
da:95:09:25:cc:d9:2b:d0:69:52:07:b9:ec:5b:50:c4:a9:df:
4a:f3:76:b8:15:c5:af:6b:25:0d:47:b3:9a:4f:1c:21:ad:a7:
d5:2c:75:cb:09:06:f4:4e:72:ae:2f:47:08:d8:8e:c8:88:6c:
08:66:59:8d:78:31:e4:55:e0:09:76:85:32:e6:c8:25:89:7f:
13:6f:d6:54:5a:97:1a:f3:fa:25:78:a4:0d:a2:01:7d:89:0e:
59:b6:80:68:36:4e:83:15:4c:b9:5b:1a:c2:cf:a2:5e:a4:c8:
9f:52:08:ff:36:88:44:a6:3f:dc:a6:1b:35:58:46:3e:1f:1a:
0c:35:ac:ef:bd:68:16:44:28:39:37:26:83:ce:fb:c1:dd:05:
3f:47:1a:50:95:56:1b:2f:a8:15:c4:d3:41:6a:51:f2:07:2a:
81:30:23:81:22:fa:56:c8:38:7c:c1:0d:ef:1f:5a:50:95:a5:
37:ce:df:f8:ce:f9:07:17:e3:fc:6f:94:be:4a:3b:6b:51:3a:
50:12:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:02 2025 by rpki-client